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The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 
All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . ^ This communication is responsive to 29 September 2005 . 

2. £3 The allowed claim(s) is/are 1.2.4-10 and 12-35 . 

3. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a) O All bjDSome* c) □ None of the: 

1 . □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

6. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 
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Paper No./Mail Date 
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of Biological Material 
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6. □ Interview Summary (PTO-413), 
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9. □ Other . 
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Allowable Subject Matter 

1. Claims 1, 2, 4-10 and 12-35 are allowed. 

2. The following is an examiner's statement of reasons for allowance: 

The primary reasons for the allowance of the independent claims 1, 2, 9, 14, 20, 
28 and 34 are the inclusion of the following limitations that are not found in the prior art 
and they are uniquely distinct features. The closest prior art is Minear et al. 
(5,983,350). Minear et al discloses a system and method for regulating the flow of 
messages through a firewall having a network protocol stack that includes an Internet 
protocol (IP) layer. Minear et al also discloses that a security for communication 
between an end device on one network and another end device on a second network 
is provided by utilizing IPSEC protocol for encryption and decryption work within the IP 
layer of the network protocol stack. Minear et al further discloses that the use of IPSEC 
requires a security association for each destination IP address. However, this art fails 
to anticipate or render the following limitations: 

"Claims 1 and 2: wherein the second network device has a publicly routable 
address, and 

wherein the second network device's publicly routable address in combination 
with the one or more locally unique security values are used to uniquely identify the first 
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network device during secure communications with a third network device on a second 
external network; 

wherein the secure communications include the one or more locally unique 
secure values, and 

wherein the second network device routes secure communication data from the 
third network device to the first network device in response to the one or more locally 
unique security values." 

"Claim 9: wherein the second network device has a publicly routable address, 

and 

wherein the second network device's publicly routable address in combination 
with the one or more locally unique security values are used to uniquely identify the first 
network device during secure communications with a third network device on a second 
external network, and 

wherein the secure communications include the one or more locally unique 
secure values, and 

wherein the second network device routes secure communication data from the 
third network device to the first network device in response to the one or more locally 
unique security values." 

"Claims 14 and 34: wherein the second network device has a publicly routable 
address, and 
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wherein the second network device's publicly routable address in combination 
with the locally unique security values are used to uniquely identify the first network 
device during secure communications with the third network device on the second 
external network, and 

wherein the secure communications include the one or more locally unique 
secure values, and 

wherein the second network device routes secure communication data from the 
third network device to the first network device in response to the one or more locally 
unique security values." 

"Claim 20: wherein the second network device has a publicly routable address, 

and 

wherein the second network device's publicly routable address in combination 
with the security information are used to uniquely identify the first network device during 
secure communications with the third network device on the second external network; 
and 

routing the reply message from the second network device to the first network 
device on the first network using one or more locally unique ports associated with the 
security information and used for distributed network address translation." 

"Claim 28: wherein the second network device has a publicly routable address, 

and 
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wherein the second network device's publicly routable address in combination 
with the one or more locally unique security values are used to uniquely identify the first 
network device during secure communications with the third network device, and 

wherein the secure communications include the one or more locally unique 
secure values, and 

wherein the second network device routes secure communication data from the 
third network device to the first network device in response to the one or more locally 
unique security values." 

3. The dependent claims 4-8, 10, 12, 13, 15-19, 21-27, 29-33 and 35 are allowed 
because they were originally found to include a unique feature not found in the closest 
abovementioned art. 

4. Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

5. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Abdulhakim Nobahar whose telephone number is 703- 
305-8074. The examiner can normally be reached on M-F 8-5. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 703-305-1830. The fax phone numbers 
for the organization where this application or proceeding is assigned are 703-746-7239 
for regular communications and 703-746-7238 for After Final communications. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 703-305- 
3900. 



Abdulhakim Nobahar, Examiner, Art Unit 2132 




November 10, 2005 



GILBERTO BARRON J * 
SUPERVISORY PATENT EXAMINER 
TECHNOLOGY CENTER 2100 




